Details of the event with ID 17 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 17 (0x11) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | EVENT_MSCEP_FAIL_TO_RETRIEVE_INFO |
| Event text (English): | The Network Device Enrollment Service cannot retrieve required information, such as the transaction ID, message type, or signing certificate, from the client's PKCS7 message (%1). %2 |
| Event text (German): | Vom Registrierungsdienst für Netzwerkgeräte können erforderliche Informationen (wie Transaktions-ID, Nachrichtentyp oder Signaturzertifikat) nicht aus der PKCS7-Nachricht (%1) des Clients abgerufen werden. %2 |
Parameter
The parameters contained in the event text are filled with the following fields:
- %1: ErrorCode (win:UnicodeString)
- %2: ErrorMessage (win:UnicodeString)
The Network Device Enrollment Service (NDES) provides a way for devices that do not have an identifier in Active Directory (for example, network devices such as routers, switches, printers, thin clients, or smartphones and tablets) to request certificates from a certification authority. For a more detailed description, see the article "Network Device Enrollment Service (NDES) Basics ".
Example events
The Network Device Enrollment Service cannot retrieve required information, such as the transaction ID, message type, or signing certificate, from the client's PKCS7 message (0x8009310b). ASN1 bad tag value met.
The Network Device Enrollment Service cannot retrieve required information, such as the transaction ID, message type, or signing certificate, from the client's PKCS7 message (0x8009100f). The cryptographic message does not contain all of the requested attributes.
Description
Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the application of rule sets to realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can be downloaded via GitHub and used free of charge. Professional maintenance is also offered.
No description has been written for this yet.
Security assessment
The security assessment is based on the three dimensions of confidentiality, integrity and availability.
No description has been written for this yet.